Bug: OIDC plugin not working with CILogon

[epkknd]

What happened?

I have installed coldfront and configured it to use cilogon for OIDC authentication. I am able to login using OIDC, but the username doesn't get pulled in properly (it uses a random string of characters as the username, instead of what is actually in the uid claim), and the first/last name fields are left blank. I have configured the OIDC client with attribute mapping, which is a feature in cilogon that allows us to change the name of claims. I used this to match the claims on our OIDC client to the claims that the oidc plugin is looking for in coldfront/plugins/mokey_oidc/auth.py. I used curl to check the claims from the same OIDC client, and it shows all the claim names are matching up to what auth.py is looking for. Even after doing this, it made no difference. I also tried deleting my user and logging in again to make sure it was actually creating a new user each time instead of using saved information. I also had one of my coworkers try logging in and he had the same result.

P.S. I'm running version 1.1.6 but that isn't an option in this form

Version

1.1.5

Component

Users

What browsers are you seeing the problem on?

Other

Relevant log output

(0.002) INSERT INTO `auth_user` (`password`, `last_login`, `is_superuser`, `username`, `first_name`, `last_name`, `email`, `is_staff`, `is_active`, `date_joined`) VALUES ('<REDACTED_PASSWORD>', NULL, 0, 'rQ-MVn0W-gU2YM5SHCkeB0mIJ1I', '', '', '<REDACTED_EMAIL', 0, 1, '2024-10-30 15:43:10.528617') RETURNING `auth_user`.`id`; args=('<REDACTED_PASSWORD>'', None, False, 'rQ-MVn0W-gU2YM5SHCkeB0mIJ1I', '', '', '<REDACTED_EMAIL>', False, True, '2024-10-30 15:43:10.528617'); alias=default

Tasks/ user tests when bug is fixed

• [ ]